<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<body>
<p>
    Hello xxx <span th:text="${who}">World</span>!!!
    [[${unsafe}]]
    [(${unsafe})]
    XSS [[${xss.escape(unsafe, "html")}]]

    XSS [[${xss.escape(unsafe, "url", "html")}]]
</p>
</body>
</html>
